Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/n7G9gMq0dfrE1l4l2xZJsfPHKek.roa
File: n7G9gMq0dfrE1l4l2xZJsfPHKek.roa (raw, json)
Hash identifier: hNwQgnQyBnEFD+ShizvmifbP8W+Wmtrfb9z2CmYCV5M=
Subject key identifier: 9F:B1:BD:80:CA:B4:75:FA:C4:D6:5E:25:DB:16:49:B1:F3:C7:29:E9
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 018B4734D485D858869E726AF92BF0083812
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/n7G9gMq0dfrE1l4l2xZJsfPHKek.roa
Signing time: Thu 19 Oct 2023 09:12:06 +0000
ROA not before: Thu 19 Oct 2023 09:12:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.66.93.0/24 maxlen: 24
45.66.94.0/23 maxlen: 23
37.44.228.0/22 maxlen: 24
192.145.52.0/22 maxlen: 24
192.145.53.0/24 maxlen: 24
192.145.54.0/24 maxlen: 24
192.145.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:47:34:d4:85:d8:58:86:9e:72:6a:f9:2b:f0:08:38:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Oct 19 09:12:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fb1bd80cab475fac4d65e25db1649b1f3c729e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:fe:a6:d4:29:34:32:64:f1:c5:26:8b:0a:
1b:ca:a5:a2:30:4f:24:48:4d:04:dd:5a:84:4e:39:
e3:68:8c:9b:84:0a:e0:91:f5:2b:92:47:73:7b:c7:
25:6e:88:5c:1b:bf:bf:95:07:73:5d:e4:6a:e5:3b:
e8:7c:72:85:7d:86:6f:74:e0:16:27:b0:06:58:f6:
7d:fd:3f:7a:83:56:7e:1a:d5:4e:20:06:cb:dd:9d:
65:49:cb:ad:d4:40:4f:57:19:c2:44:2c:f9:07:13:
e9:21:80:75:aa:cb:db:1f:fc:98:88:a9:f8:7f:1b:
64:bf:57:d3:1f:a4:3f:c4:de:f8:73:66:ca:e4:72:
7c:62:fc:1e:18:2f:b7:a3:9c:d9:5e:d5:7c:ba:b2:
9c:6a:c6:68:19:d6:dc:7d:d2:90:93:4c:71:aa:71:
ee:ea:78:55:a7:fb:fa:04:04:e5:9e:bf:0a:3d:8b:
74:0e:2f:93:af:41:31:51:b7:d4:72:74:69:aa:d9:
44:85:ae:fa:72:86:44:70:6b:25:96:a8:d4:93:f3:
70:72:3c:01:9b:39:a2:4b:44:12:43:9b:33:cf:cb:
2c:23:af:93:e1:0f:cb:67:e0:f0:1e:99:05:f7:6f:
7f:2f:59:70:d5:cb:e4:93:20:0c:82:6b:89:63:76:
8c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B1:BD:80:CA:B4:75:FA:C4:D6:5E:25:DB:16:49:B1:F3:C7:29:E9
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/n7G9gMq0dfrE1l4l2xZJsfPHKek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.228.0/22
45.66.93.0-45.66.95.255
192.145.52.0/22
Signature Algorithm: sha256WithRSAEncryption
28:81:d0:1c:85:61:b5:fe:43:b8:36:00:46:49:45:17:6d:79:
53:d2:8e:c1:c8:1b:0c:75:02:e2:22:db:2a:07:7a:e8:32:d8:
07:f3:79:21:9f:5f:c2:7b:11:22:b3:5a:6a:9e:46:38:55:61:
e0:74:ca:01:cd:83:7c:e4:ae:cd:64:5f:25:70:aa:ec:db:5c:
99:82:29:2f:a4:af:2d:3f:d2:80:6a:36:91:54:d0:68:89:61:
d0:a6:ac:96:f8:48:51:26:2f:ca:62:53:35:a9:81:59:4e:d0:
35:f9:7c:dc:0d:2a:12:66:78:38:06:bf:ce:ff:e6:1e:2f:a3:
1d:ca:ca:ab:0e:72:fd:bd:be:ea:e2:d6:3f:ae:92:0e:6d:03:
f9:48:37:c4:16:01:41:e2:aa:aa:58:31:ca:b6:2c:19:56:69:
35:92:e3:a6:91:84:44:61:c1:bf:b0:f1:50:2e:2a:03:0b:44:
b1:e6:1f:bd:c0:af:9b:e0:22:b4:c9:cf:a6:e0:bd:ea:12:f4:
94:9f:36:63:74:c8:d8:c2:00:8f:5c:b4:d2:39:ec:d8:0c:23:
58:20:d4:68:ff:63:5d:20:76:6e:0c:fc:91:32:0e:90:4e:f5:
49:04:23:e7:f8:d0:bb:ef:bf:6e:10:f7:64:af:9e:e8:eb:9e:
4f:b6:c3:3d
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYtHNNSF2FiGnnJq+SvwCDgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNjM3ODdmZDBmOTRiMzc4MTNlZWYxNmJjODEzNzQyM2Vl
M2ZlZjMwHhcNMjMxMDE5MDkxMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmIxYmQ4MGNhYjQ3NWZhYzRkNjVlMjVkYjE2NDliMWYzYzcyOWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAn+ptQpNDJk8cUmiwobyqWiME8k
SE0E3VqETjnjaIybhArgkfUrkkdze8clbohcG7+/lQdzXeRq5TvofHKFfYZvdOAW
J7AGWPZ9/T96g1Z+GtVOIAbL3Z1lScut1EBPVxnCRCz5BxPpIYB1qsvbH/yYiKn4
fxtkv1fTH6Q/xN74c2bK5HJ8YvweGC+3o5zZXtV8urKcasZoGdbcfdKQk0xxqnHu
6nhVp/v6BATlnr8KPYt0Di+Tr0ExUbfUcnRpqtlEha76coZEcGsllqjUk/NwcjwB
mzmiS0QSQ5szz8ssI6+T4Q/LZ+DwHpkF929/L1lw1cvkkyAMgmuJY3aMyQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFJ+xvYDKtHX6xNZeJdsWSbHzxynpMB8GA1UdIwQY
MBaAFDJjeH/Q+Us3gT7vFryBN0I+4/7zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2Qt
NTk1ZTBiZjVjNjEzLzEvbjdHOWdNcTBkZnJFMWw0bDJ4WkpzZlBIS2VrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NzAzZWYtMjQyMi00MzdjLWI5M2QtNTk1ZTBiZjVjNjEz
LzEvTW1ONGY5RDVTemVCUHU4V3ZJRTNRajdqX3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCJSzkMAwD
BAAtQl0DBAUtQkADBALAkTQwDQYJKoZIhvcNAQELBQADggEBACiB0ByFYbX+Q7g2
AEZJRRdteVPSjsHIGwx1AuIi2yoHeugy2AfzeSGfX8J7ESKzWmqeRjhVYeB0ygHN
g3zkrs1kXyVwquzbXJmCKS+kry0/0oBqNpFU0GiJYdCmrJb4SFEmL8piUzWpgVlO
0DX5fNwNKhJmeDgGv87/5h4vox3KyqsOcv29vuri1j+ukg5tA/lIN8QWAUHiqqpY
Mcq2LBlWaTWS46aRhERhwb+w8VAuKgMLRLHmH73Ar5vgIrTJz6bgveoS9JSfNmN0
yNjCAI9ctNI57NgMI1gg1Gj/Y10gdm4M/JEyDpBO9UkEI+f40Lvvv24Q92Svnujr
nk+2wz0=
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:12 2023 by rpki-client on console.sobornost.net